the new controlchan (+gpgverify)
greg andruk
supersede at india.com
Thu Feb 8 05:54:41 UTC 2001
In nnfolder+Mail:inn-workers, Russ Allbery <rra at stanford.edu> wrote:
>> It doesn't want to require a file before the path has been sanitized.
> ...I don't understand the reason for this. require has nothing to do with
> the path.
Sorry, I explained that poorly. It's the `open F, ...' in the
convoluted eval substitute that elicits the insecure $ENV{PATH}
screaming, and I'm not sure if it's a good idea for innshellvars to be
mucking with the path behind the back of the calling script to get
around it.
More information about the inn-workers
mailing list